Method, electronic device, and computer program product for managing operating system

ABSTRACT

Embodiments of the present disclosure provide a method, an electronic device, and a computer program product for managing an operating system. The method includes receiving a version upgrade request for the system. The method further includes using a target system image to upgrade the system from a first version to a second version corresponding to the target system image. The method further includes storing, in response to determining that the system operates normally within a first time period, the target system image to a first storage device for the system without updating a historical system image stored in a second storage device for the system, wherein the historical system image corresponds to the first version. In this way, by storing image files of different versions for selectively resetting the operating system in case of a failure, stability of the system after an upgrade is improved.

RELATED APPLICATION(S)

The present application claims priority to Chinese Patent ApplicationNo. 202111235699.6, filed Oct. 22, 2021, and entitled “Method,Electronic Device, and Computer Program Product for Managing OperatingSystem,” which is incorporated by reference herein in its entirety.

FIELD

Embodiments of the present disclosure relate to the field of computers,and more specifically, to a method, an electronic device, and a computerprogram product for managing an operating system.

BACKGROUND

A variety of different methods may be used for upgrading an operatingsystem of an electronic device (such as a server). For example, onewell-known approach involves using a Universal Serial Bus (USB) memoryfor upgrading. In this approach, when the operating system is beingupgraded, it is first necessary to create a new version of an image fileby using a specific software tool and writing the image file into theUSB memory. After that, for example, by setting a system BIOS, whereBIOS denotes Basic Input/Output System, the system can directly read andload the image file in the USB memory after startup. After the imagefile is loaded by the system, an installation program is started.

SUMMARY

Embodiments of the present disclosure provide an upgrading solution formanaging an operating system.

In a first aspect of the present disclosure, a method for managing anoperating system is provided. The method includes receiving a versionupgrade request for the system. The method further includes using atarget system image to upgrade the system from a first version to asecond version corresponding to the target system image. The methodfurther includes storing, in response to determining that the systemoperates normally within a first time period, the target system image toa first storage device for the system without updating a historicalsystem image stored in a second storage device for the system, whereinthe historical system image corresponds to the first version.

In a second aspect of the present disclosure, an electronic device isprovided. The electronic device includes a processor; and a memorycoupled to the processor, the memory having instructions stored therein,and the instructions, when executed by the processor, causing the deviceto execute actions. The actions include receiving a version upgraderequest for a system. The actions further include using a target systemimage to upgrade the system from a first version to a second versioncorresponding to the target system image. The actions further includestoring, in response to determining that the system operates normallywithin a first time period, the target system image to a first storagedevice for the system without updating a historical system image storedin a second storage device for the system, wherein the historical systemimage corresponds to the first version.

In a third aspect of the present disclosure, a computer program productis provided. The computer program product is tangibly stored on acomputer-readable storage medium and includes machine-executableinstructions. The machine-executable instructions, when executed by amachine, cause the machine to perform the method according to the firstaspect.

This Summary is provided to introduce the selection of concepts in asimplified form, which will be further described in the DetailedDescription below. The Summary is neither intended to identify keyfeatures or main features of the present disclosure, nor intended tolimit the scope of the present disclosure.

BRIEF DESCRIPTION OF THE DRAWINGS

By more detailed description of example embodiments of the presentdisclosure with reference to the accompanying drawings, the above andother objectives, features, and advantages of the present disclosurewill become more apparent, where identical reference numerals generallyrepresent identical components in the example embodiments of the presentdisclosure. In the accompanying drawings:

FIG. 1 shows a schematic diagram of an example system in whichembodiments of the present disclosure may be implemented;

FIG. 2 shows a flow chart of an example method for managing an operatingsystem according to an embodiment of the present disclosure;

FIGS. 3A-3C show sequence charts of example updating mechanisms ofimages according to some embodiments of the present disclosure; and

FIG. 4 shows a block diagram of an example device that may be configuredto implement embodiments of the present disclosure.

DETAILED DESCRIPTION

Principles of the present disclosure will be described below withreference to several example embodiments illustrated in the accompanyingdrawings. Although the drawings show example embodiments of the presentdisclosure, it should be understood that these embodiments are merelydescribed to enable those skilled in the art to better understand andthen implement the present disclosure, and not in any way limit thescope of the present disclosure.

The term “include” and variants thereof used herein indicate open-endedinclusion, that is, “including but not limited to.” Unless otherwisestated, the term “or” means “and/or.” The term “based on” denotes “atleast partially based on.” The terms “an example embodiment” and “anembodiment” denote “at least one example embodiment.” The term “anotherembodiment” means “at least one further embodiment.” The terms “first,”“second,” and the like may refer to different or the same objects. Otherexplicit and implicit definitions may also be included below.

As discussed above, there are some drawbacks in using a USB memory toupgrade an operating system. Using USB for installation is aconventional method of installing an operating system. For example,after the operating system is upgraded, when the system fails, an imagefile of an old version has usually been deleted, and the operatingsystem cannot roll back to the previous version, that is, the systemcannot cope with the system failure well. In addition, there is noautomatic mechanism to establish a stable operating system upgradingprocedure. After the operating system is upgraded, a backup image willnot be upgraded accordingly. If the system fails, the operating systemwill be degraded to a previous version stored in the USB memory.However, if the USB memory is not correctly inserted into the device oris damaged at the moment, the operating system will not be restored.Therefore, the protection for the operating system after systemupgrading is weak.

Embodiments of the present disclosure provide a solution for managing anoperating system to solve one or more of the above problems and otherpotential problems. In the solution, there are at least two storagedevices for the system. When the system is upgraded from a first versionto a second version, a system image file of the first version is storedin both of the two storage devices. Then, operation conditions of thesystem are monitored. If the system operates normally within apredetermined first time period, a system image of the second version isused to replace the system image file of the first version in onestorage device, but the system image file of the first version in theother storage device is not updated. Thus, in subsequent operation ofthe system, in case of an abnormality, the two versions may be used forselectively restoring the system. In this way, stability of theoperating system after an upgrade is improved.

FIG. 1 shows a schematic diagram of example system 100 in which anembodiment of the present disclosure may be implemented. As shown inFIG. 1 , system 100 includes system manager 110, magnetic disk drive 120and magnetic disk 130 coupled with the system manager, storage devicedrive 140, and storage device 150. It should be understood that thearchitecture and functions of system 100 are described for illustrativepurposes only, and do not imply any limitation to the scope of thepresent disclosure. Embodiments of the present disclosure may also beapplied to environments involving data protection systems with differentstructures and/or functions.

System manager 110 includes upgrade manager 111 and monitor 112. Upgrademanager 111 may manage upgrade behaviors of the system, for example,determine whether the system should be upgraded, to which version thesystem is to be upgraded, and an image file stored in which position isto be upgraded. Monitor 112 may monitor operation statuses of variouscomponents in the system, and when detecting an abnormality, send awarning to the system, especially to a corresponding functionalcomponent in the system. Monitor 112 may, for example, monitor theoperation status of the operating system, and may also monitor thestatus of storage device 150 or magnetic disk 130. Magnetic disk 130 maybe a storage device where the operating system is installed. Storagedevice 150 may, for example, be a removable (pluggable) storage device(such as a USB memory or an SD card, where SD illustratively denotes“secure digital”). In this case, monitor 112 may, for example, monitorwhether storage device 150 is online, whether there is an abnormality,whether the device is correctly inserted, and whether it is underwrite-protection.

Storage device 150 for the system may, for example, be an IDSDM(internal dual SD module) with dual SD cards. The IDSDM includes, inaddition to the dual SD cards, an adapter into which the two SD cardsmay be inserted. Normally, data stored in the two SD cards is redundant,that is, they store exactly the same content. Any of the two SD cardsmay serve as a main card. For example, if two new SD cards are installedin the IDSDM, SD1 is an active (main) card, and SD2 is a backup card.Data is written on the two cards, but is read from SD1. At any time, ifSD1 fails or is removed, SD2 automatically becomes the active (main)card.

Example embodiments of the present disclosure will be described indetail below with reference to FIG. 2 to FIG. 4 .

FIG. 2 shows a flow chart of example method 200 for managing anoperating system according to an embodiment of the present disclosure.Method 200 may be executed, for example, by system manager 110 as shownin FIG. 1 .

At block 202, system manager 110 receives a version upgrade request forthe system. Upon receiving the upgrade request, system manager 110 mayconfirm whether a new image file of a target version is available. Theimage file of the target version is, for example, downloaded into astorage device for the system.

At block 204, system manager 110 uses a target system image to upgradethe system from a first version to a second version corresponding to thetarget system image. After system manager 110 confirms that the imagefile of the target version is available, upgrade may be performed.

System manager 110 judges whether the system operates normally within afirst time period. If it is determined that the system operates normallywithin the first time period, at block 206, system manager 110 storesthe target system image into a first storage device for the systemwithout updating a historical system image stored in a second storagedevice for the system. The historical system image corresponds to thefirst version.

In some embodiments, if system manager 110 determines that the systemoperates abnormally within the first time period, it will use an imagestored in the first storage device to cause the system to roll back. Insome embodiments, the first storage device and the second storage devicemay be removable storage devices. In some embodiments, the first storagedevice and the second storage device may be a first SD card and a secondSD card in an IDSDM. Before the system is upgraded, an image file of thesame version is stored in both the first storage device and the secondstorage device, and is stored until system manager 110 determines thatthe system operates normally within the first time period; and the imagefile of an old version, i.e., the first version, stored in any of thetwo storage devices will be replaced with an image file of a newversion, i.e., the second version. At the moment, the two storagedevices store image files of different versions, and when the systemoperates abnormally afterwards, the image file of the first version orthe image file of the second version may be selectively used to resetthe system. In addition, corresponding replacement may be performed whenan image file is damaged. In this way, the stability of the operatingsystem against system abnormalities after upgraded is improved, and itis ensured that the abnormalities can be automatically handled.

It should be understood that the number of storage devices describedhere is only illustrative and not intended to limit the scope of thepresent disclosure. A different number of storage devices may bearranged according to specific application scenarios, and image files ofdifferent versions may be respectively stored.

FIGS. 3A-3C show sequence charts of example updating mechanisms 310-330of images according to some embodiments of the present disclosure. Theupdating mechanisms or updating methods shown in FIGS. 3A-3C may, forexample, be executed by system manager 110 in FIG. 1 . It should beunderstood that updating mechanisms 310-330 may include additionalactions not shown and/or may omit shown actions, and the scope of thepresent disclosure is not limited in this respect.

FIG. 3A shows a sequence chart of image updating mechanism 310 accordingto an embodiment of the present disclosure. As shown in FIG. 3A, atmoment A1, at block 311, an image file of a second version is used toupgrade the system from a first version to the second version. In someembodiments, the storage device associated with the system duringoperation is a conventional storage device with a large capacity, forexample, magnetic disk 130. In some embodiments, when upgrade isperformed, an image file of a new version may be downloaded to themagnetic disk, and the image file of the new version in the magneticdisk is used for upgrade. At the moment, an image file of a previousversion used in a previous upgrade may be stored in the first storagedevice and the second storage device. In some embodiments, an image fileof an earlier version may also be stored in the first storage device andthe second storage device. For example, the earlier version may haveproven to be the safest and the most stable of multiple distinctversions.

After the system is successfully upgraded, at moment B1 beforepredetermined moment T1, at block 312, system manager 110, or moreparticularly monitor 112 in system manager 110, detects that the systemoperates abnormally and determines that the new version is unstable, andthe system needs to be reset. Here, A1 to T1 may correspond to the firsttime period mentioned above. At moment C1, at block 313, because of anabnormality of the system, the image file in the conventional storagedevice is unavailable or deleted, and at the moment, the image file ofthe first version stored in the first storage device is used to causethe system to roll back to the first version. In some embodiments,moment B1 and moment C1 may be basically the same moment, i.e., a rollback operation is immediately performed after an abnormality of thesystem is detected. In some embodiments, moment C1 is a moment a periodof time after moment B1, and during the period, the system may alsoexecute data backup. In some embodiments, when the system managerconfirms that the system needs to be reset, it may automatically changea starting sequence in BIOS, and the system, when started, first entersthe first storage device as a main storage device, so that an imagestored in the first storage device is used for restoring the system.After BIOS setting is completed, the system may be automaticallyrestarted to be restored.

FIG. 3B shows a sequence chart of image updating mechanism 320 accordingto another embodiment of the present disclosure. As shown in FIG. 3B, atmoment A2, at block 321, an image file of a second version is used toupgrade the system from a first version to the second version. After thesystem is upgraded successfully, if monitor 112 determines that thesystem is always operating normally until predetermined moment T2, itmeans that the second version is stable, so at block 322, an image ofthe first version stored in the first storage device as the main storagedevice is replaced with the second version. In some embodiments, thetime period between moment A2 and moment T2 may, for example, correspondto the first time period mentioned above. At moment B2 after moment T2,at block 323, monitor 112 detects that the system operates abnormally,so the system needs to be reset. At moment C2, at block 324, the imageof the second version stored in the first storage device is used toreset the system, i.e., the system is restored to initial settings ofthe second version. In some embodiments, moment B2 and moment C2 may bebasically the same moment, i.e., a restoration operation is performedimmediately after the system abnormality is detected. In someembodiments, moment C2 is a moment a period of time after moment B2, andduring the period, the system may also execute data backup. After thatand until moment T3, the system may have multiple abnormalities (forexample, exceeding the acceptable predetermined number of times) and berestored multiple times. System manager 110 judges that the secondversion is not stable enough. At block 325, the image of the firstversion stored in the second storage device is used to reset the systemand replace the image stored in the first storage device. That is, thesystem is caused to roll back from the second version to the firstversion, and the image file of the second version in the first storagedevice is replaced with the first version. In some embodiments, whensystem manager 110 determines that the system needs to roll back to thefirst version, the main storage device may be automatically changed fromthe first storage device to the second storage device, and then thesystem is reset by the BIOS setting and restarting steps discussedabove. In this way, by storing different versions of image files indifferent storage devices, whether to use a new version to restore thesystem or to use an old version to roll the system back and replace thestored old version is selected based on practical using conditions, sostability of the operating system is ensured.

FIG. 3C shows a sequence chart of image updating mechanism 330 accordingto another embodiment of the present disclosure. As shown in FIG. 3C, atmoment A3, at block 331, an image file of a second version is used toupgrade the system from a first version to the second version. After thesystem is upgraded, if there is no abnormality of the system untilpredetermined moment T4, it means that the second version is stable, soat block 332, an image of the first version stored in a first storagedevice as the main storage device is replaced with the second version.Then, if there is still no abnormality of the system until moment T5, itfurther means that the second version is stable, so at block 333, theimage stored in the second storage device is replaced with the secondversion. Afterwards, the system may operate normally according to thesecond version.

In some embodiments, system manager 110, and more particularly monitor112, may monitor operation statuses of the first storage device and thesecond storage device. For example, when the storage device is an SDcard in the IDSDM, the operation status may be device present, i.e., thestorage device is correctly inserted into an adapter. The operationstatus may be device absent, i.e., the storage device is not correctlyinserted into the adapter. The operation status may also be deviceoffline or write-protected. Statuses other than device present areregarded by monitor 112 as abnormalities of the storage device, whichwill more particularly cause the aforesaid updating mechanism to beunavailable. Therefore, monitor 112 will generate a warning tofacilitate further processing. In some embodiments, monitoring ofoperation statuses of the storage devices may be performed in real time,or may be performed at a predetermined time interval.

In some embodiments, integrity of the image files may also bedetermined, and when it is determined that one of the image files storedin the storage devices is damaged, the damaged image file is replacedwith an undamaged image file. In some embodiments, inspection ofintegrity of the image files may be performed at a predetermined timeinterval. In some embodiments, inspection of integrity of the imagefiles may be executed based on hashed values. For example, when thesystem is upgraded from the first version to the second version, hashedvalues of the image file of the second version, for example, the sum ofhashed values of all files included by the image file, may be calculated(for example, using md5 value or SHA1 value), and a result is stored inthe system. Alternatively, when an image file is copied to a storagedevice, hashed values associated with the image file may also be storedinto the storage device to facilitate subsequent inspection. In someembodiments, when the system detects that current hashed values of animage file are different from initial hashed values, it will beconfirmed that the current image file is incomplete and needs to bereplaced. For example, an image file which is still stored in aconventional storage device or a complete image file in another storagedevice may be used for replacement.

FIG. 4 shows a schematic block diagram of example device 400 that may beconfigured to implement embodiments of the present disclosure. As shownin FIG. 4 , device 400 includes central processing unit (CPU) 401 whichmay perform various appropriate actions and processing according tocomputer program instructions stored in read-only memory (ROM) 402 orcomputer program instructions loaded from storage unit 408 to randomaccess memory (RAM) 403. RAM 403 may further store various programs anddata required by operations of device 400. CPU 401, ROM 402, and RAM 403are connected to each other through bus 404. Input/output (I/O)interface 405 is also connected to bus 404.

A number of components in device 400 are connected to I/O interface 405,including: input unit 406, such as a keyboard and a mouse; output unit407, such as various types of displays and speakers; storage unit 408,such as a magnetic disk and an optical disc; and communication unit 409,such as a network card, a modem, or a wireless communicationtransceiver. Communication unit 409 allows device 400 to exchangeinformation/data with other devices through a computer network such asthe Internet and/or various telecommunication networks.

The various processes and processing described above, for example,method 200, may be executed by CPU 401. For example, in someembodiments, method 200 may be implemented as a computer softwareprogram that is tangibly included in a machine-readable medium such asstorage unit 408. In some embodiments, part of or all the computerprograms may be loaded and/or installed onto device 400 via ROM 402and/or communication unit 409. When a computer program is loaded intoRAM 403 and executed by CPU 401, one or more actions of method 200described above may be implemented.

Illustrative embodiments of the present disclosure include a method, anapparatus, a system, and/or a computer program product. The computerprogram product may include a computer-readable storage medium on whichcomputer-readable program instructions for performing various aspects ofthe present disclosure are loaded.

The computer-readable storage medium may be a tangible device that mayhold and store instructions used by an instruction-executing device. Forexample, the computer-readable storage medium may be, but is not limitedto, an electric storage device, a magnetic storage device, an opticalstorage device, an electromagnetic storage device, a semiconductorstorage device, or any suitable combination of the foregoing. Morespecific examples (a non-exhaustive list) of the computer-readablestorage medium include: a portable computer disk, a hard disk, a RAM, aROM, an erasable programmable read-only memory (EPROM or flash memory),a static random access memory (SRAM), a portable compact disc read-onlymemory (CD-ROM), a digital versatile disc (DVD), a memory stick, afloppy disk, a mechanical encoding device, for example, a punch card ora raised structure in a groove with instructions stored thereon, and anysuitable combination of the foregoing. The computer-readable storagemedium used herein is not to be interpreted as transient signals per se,such as radio waves or other freely propagating electromagnetic waves,electromagnetic waves propagating through waveguides or othertransmission media (e.g., light pulses through fiber-optic cables), orelectrical signals transmitted through electrical wires.

The computer-readable program instructions described herein may bedownloaded from a computer-readable storage medium to variouscomputing/processing devices or downloaded to an external computer orexternal storage device via a network, such as the Internet, a localarea network, a wide area network, and/or a wireless network. Thenetwork may include copper transmission cables, fiber optictransmission, wireless transmission, routers, firewalls, switches,gateway computers, and/or edge servers. A network adapter card ornetwork interface in each computing/processing device receives thecomputer-readable program instructions from the network and forwards thecomputer-readable program instructions for storage in acomputer-readable storage medium in each computing/processing device.

The computer program instructions for executing the operation of thepresent disclosure may be assembly instructions, instruction setarchitecture (ISA) instructions, machine instructions, machine-dependentinstructions, microcode, firmware instructions, status setting data, orsource code or object code written in any combination of one or moreprogramming languages, the programming languages includingobject-oriented programming languages such as Smalltalk and C++, andconventional procedural programming languages such as the C language orsimilar programming languages. The computer-readable programinstructions may be executed entirely on a user computer, partly on auser computer, as a stand-alone software package, partly on a usercomputer and partly on a remote computer, or entirely on a remotecomputer or a server. In a case where a remote computer is involved, theremote computer may be connected to a user computer through any kind ofnetworks, including a local area network (LAN) or a wide area network(WAN), or may be connected to an external computer (for example,connected through the Internet using an Internet service provider). Insome embodiments, an electronic circuit, such as a programmable logiccircuit, a field programmable gate array (FPGA), or a programmable logicarray (PLA), is customized by utilizing status information of thecomputer-readable program instructions. The electronic circuit mayexecute the computer-readable program instructions to implement variousaspects of the present disclosure.

Various aspects of the present disclosure are described herein withreference to flow charts and/or block diagrams of the method, theapparatus (system), and the computer program product according toembodiments of the present disclosure. It should be understood that eachblock of the flow charts and/or the block diagrams and combinations ofblocks in the flow charts and/or the block diagrams may be implementedby computer-readable program instructions.

These computer-readable program instructions may be provided to aprocessing unit of a general-purpose computer, a special-purposecomputer, or a further programmable data processing apparatus, therebyproducing a machine, such that these instructions, when executed by theprocessing unit of the computer or the further programmable dataprocessing apparatus, produce apparatuses for implementingfunctions/actions specified in one or more blocks in the flow chartsand/or block diagrams. These computer-readable program instructions mayalso be stored in a computer-readable storage medium, and theseinstructions cause a computer, a programmable data processing apparatus,and/or other devices to operate in a specific manner; and thus thecomputer-readable storage medium having instructions stored includes anarticle of manufacture that includes instructions that implement variousaspects of the functions/actions specified in one or more blocks in theflow charts and/or block diagrams.

The computer-readable program instructions may also be loaded to acomputer, a further programmable data processing apparatus, or a furtherdevice, so that a series of operating steps may be performed on thecomputer, the further programmable data processing apparatus, or thefurther device to produce a computer-implemented process, such that theinstructions executed on the computer, the further programmable dataprocessing apparatus, or the further device may implement thefunctions/actions specified in one or more blocks in the flow chartsand/or block diagrams.

The flow charts and block diagrams in the drawings illustrate thearchitectures, functions, and operations of possible implementations ofthe systems, methods, and computer program products according to variousembodiments of the present disclosure. In this regard, each block in theflow charts or block diagrams may represent a module, a program segment,or part of an instruction, the module, program segment, or part of aninstruction including one or more executable instructions forimplementing specified logical functions. In some alternativeimplementations, functions marked in the blocks may also occur in anorder different from that marked in the accompanying drawings. Forexample, two successive blocks may actually be executed in parallelsubstantially, and sometimes they may also be executed in an inverseorder, which depends on involved functions. It should be further notedthat each block in the block diagrams and/or flow charts as well as acombination of blocks in the block diagrams and/or flow charts may beimplemented by using a special hardware-based system that executesspecified functions or actions, or implemented using a combination ofspecial hardware and computer instructions.

Example embodiments of the present disclosure have been described above.The above description is illustrative, rather than exhaustive, and isnot limited to the disclosed various embodiments. Numerous modificationsand alterations will be apparent to those of ordinary skill in the artwithout departing from the scope and spirit of the illustratedembodiments. The selection of terms used herein is intended to bestexplain the principles and practical applications of the variousembodiments or the improvements to technologies on the market, so as toenable persons of ordinary skill in the art to understand theembodiments disclosed herein.

What is claimed is:
 1. A method, comprising: receiving a version upgraderequest for a system; using a target system image to upgrade the systemfrom a first version to a second version corresponding to the targetsystem image; and storing, in response to determining that the systemoperates normally within a first time period, the target system image toa first storage device for the system without updating a historicalsystem image stored in a second storage device for the system, whereinthe historical system image corresponds to the first version; whereinusing the target system image to upgrade the system comprises using thetarget system image to upgrade at least an operating system portion ofthe system.
 2. The method according to claim 1, further comprising:updating, in response to determining that the system operates normallywithin a second time period after the first time period, the historicalsystem image stored in the second storage device to the target systemimage.
 3. The method according to claim 2, wherein the first storagedevice stores a first image file corresponding to a target historicalimage, the second storage device stores a second image filecorresponding to the target historical image, and the method furthercomprises: determining integrity of the first image file and the secondimage file; and replacing, in response to at least one of the firstimage file and the second image file being damaged, the damaged imagefile with an undamaged image file in the first image file and the secondimage file.
 4. The method according to claim 3, wherein determining theintegrity of the first image file and the second image file comprises:determining the integrity of the first image file and the second imagefile based on hashed values of the first image file and the second imagefile.
 5. The method according to claim 1, further comprising: resetting,in response to determining that the system is abnormal in the first timeperiod, the system by using the target system image stored in the firststorage device.
 6. The method according to claim 5, further comprising:resetting, in response to determining that the number of times that thesystem is abnormal within a third time period after the first timeperiod exceeds a preset threshold, the system to the first version byusing the historical system image stored in the second storage device;and replacing the target system image stored in the first storage devicewith the historical system image.
 7. The method according to claim 1,further comprising: generating, in response to determining that at leastone of the first storage device and the second storage device isabnormal, a warning corresponding to the abnormality, wherein theabnormality comprises at least one of the following: device failure,device offline, device absent, or device write-protected.
 8. Anelectronic device, comprising: a processor; and a memory coupled to theprocessor, wherein the memory has instructions stored therein, and theinstructions, when executed by the processor, cause the electronicdevice to execute actions comprising: receiving a version upgraderequest for a system; using a target system image to upgrade the systemfrom a first version to a second version corresponding to the targetsystem image; and storing, in response to determining that the systemoperates normally within a first time period, the target system image toa first storage device for the system without updating a historicalsystem image stored in a second storage device for the system, whereinthe historical system image corresponds to the first version; whereinusing the target system image to upgrade the system comprises using thetarget system image to upgrade at least an operating system portion ofthe system.
 9. The electronic device according to claim 8, wherein theactions further comprise: updating, in response to determining that thesystem operates normally within a second time period after the firsttime period, the historical system image stored in the second storagedevice to the target system image.
 10. The electronic device accordingto claim 9, wherein the first storage device stores a first image filecorresponding to a target historical image, the second storage devicestores a second image file corresponding to the target historical image,and the actions further comprise: determining integrity of the firstimage file and the second image file; and replacing, in response to atleast one of the first image file and the second image file beingdamaged, the damaged image file with an undamaged image file in thefirst image file and the second image file.
 11. The electronic deviceaccording to claim 10, wherein determining the integrity of the firstimage file and the second image file comprises: determining theintegrity of the first image file and the second image file based onhashed values of the first image file and the second image file.
 12. Theelectronic device according to claim 8, wherein the actions furthercomprise: resetting, in response to determining that the system isabnormal in the first time period, the system by using the target systemimage stored in the first storage device.
 13. The electronic deviceaccording to claim 12, wherein the actions further comprise: resetting,in response to determining that the number of times that the system isabnormal within a third time period after the first time period exceedsa preset threshold, the system to the first version by using thehistorical system image stored in the second storage device; andreplacing the target system image stored in the first storage devicewith the historical system image.
 14. The electronic device according toclaim 8, wherein the actions further comprise: generating, in responseto determining that at least one of the first storage device and thesecond storage device is abnormal, a warning corresponding to theabnormality, wherein the abnormality comprises at least one of thefollowing: device failure, device offline, device absent, or devicewrite-protected.
 15. A computer program product tangibly stored on anon-transitory computer-readable storage medium and comprisingmachine-executable instructions that, when executed by a machine, causethe machine to perform a method, the method comprising: receiving aversion upgrade request for a system; using a target system image toupgrade the system from a first version to a second versioncorresponding to the target system image; and storing, in response todetermining that the system operates normally within a first timeperiod, the target system image to a first storage device for the systemwithout updating a historical system image stored in a second storagedevice for the system, wherein the historical system image correspondsto the first version; wherein using the target system image to upgradethe system comprises using the target system image to upgrade at leastan operating system portion of the system.
 16. The computer programproduct according to claim 15, further comprising: updating, in responseto determining that the system operates normally within a second timeperiod after the first time period, the historical system image storedin the second storage device to the target system image.
 17. Thecomputer program product according to claim 16, wherein the firststorage device stores a first image file corresponding to a targethistorical image, the second storage device stores a second image filecorresponding to the target historical image, and the method furthercomprises: determining integrity of the first image file and the secondimage file; and replacing, in response to at least one of the firstimage file and the second image file being damaged, the damaged imagefile with an undamaged image file in the first image file and the secondimage file.
 18. The computer program product according to claim 17,wherein determining the integrity of the first image file and the secondimage file comprises: determining the integrity of the first image fileand the second image file based on hashed values of the first image fileand the second image file.
 19. The computer program product according toclaim 15, further comprising: resetting, in response to determining thatthe system is abnormal in the first time period, the system by using thetarget system image stored in the first storage device.
 20. The computerprogram product according to claim 19, further comprising: resetting, inresponse to determining that the number of times that the system isabnormal within a third time period after the first time period exceedsa preset threshold, the system to the first version by using thehistorical system image stored in the second storage device; andreplacing the target system image stored in the first storage devicewith the historical system image.